7008 matches found
Solaris 10 (x86) : 126364-08
SunOS 5.10x86: X Window System changes -. Date this patch was last updated by Sun : Oct/16/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...
Arista Networks EOS tcp_input Challenge ACKs Shared Counter Disclosure (SA0023)
The version of Arista Networks EOS running on the remote device is affected by a flaw in the Linux kernel implementation within file net/ipv4/tcpinput.c due to a failure to properly determine the rate of challenge ACK segments. An unauthenticated, remote attacker can exploit this issue to access...
Etherpad Lite Cross-Site Scripting Vulnerability
Etherpad Lite is the Etherpad Foundation's suite of open source rich text online collaboration software. A cross-site scripting vulnerability exists in the static/js/padutils.js file in Etherpad Lite versions prior to 1.6.3. A remote attacker can use window.location.href to inject arbitrary Web...
Linux kernel denial of service vulnerability (CNVD-2018-06440)
The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A denial of service vulnerability exists in the Linux kernel prior to 4.14.4. The vulnerability arises because the...
mavo中noscript xss的安全绕过
首先，我们可以利用noscript不会对跟随字母数字的函数进行检测的特性，把函数与anchor属性的值结合以躲避检测。 mavoscript作为javascript的扩展，并不支持此类操作，所以我们需要将mavoscript转化为javascript模式。 从mavoscript的语法中可知，当mavo遇到无效的mavoscript时，它就会将无效的mavoscript当作javascript来处理。 //X=＇javascript ＇//X+=＇：alert＇+ y.rel + y.title test...
OpenJDK: GTK library loading use-after-free (AWT, 8185325)
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: AWT. Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multip...
OpenJDK: unbounded memory allocation during deserialization (AWT, 8190289)
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: AWT. Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple...
CVE-2018-7304
Tiki 17.1 does not validate user input for special characters; consequently, a CSV Injection attack can open a CMD.EXE or Calculator window on the victim machine to perform malicious activity, as demonstrated by an "=cmd|' /C calc'!A0" payload during User Creation...
Microsoft Internet Explorer 11 - 'Js::RegexHelper::RegexReplace' Use-After-Free
var vars = new Array2; function main vars0 = Array1000000.joinString.fromCharCode0x41; vars1 = String.prototype.substring.callvars0, 1, vars0.length; String.prototype.replace.callvars1, RegExp, f; function farg1, arg2, arg3 alertarg3; vars0 = 1; CollectGarbage; return 'a'; main; +0x122e5d:...
ALPINE-CVE-2018-7052
An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. When the number of windows exceeds the available space, a crash due to a NULL pointer dereference would occur...
Mozilla Firefox Thunderbird Memory Use After Free DoS
The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the use of memory after it is freed, as a result of an update to the “marquee” object when window sizes are changed. Exploiting this vulnerability can allow a remote attacker to cause service...
CVE-2018-6367
SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chatim/chatwindow.php requestid parameter or the /searchevents.php category parameter...
Sql injection
SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chatim/chatwindow.php requestid parameter or the /searchevents.php category parameter...
CVE-2018-6367
SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chatim/chatwindow.php requestid parameter or the /searchevents.php category parameter...
xorg-x11-server integer overflow vulnerability
The xorg-x11-server is an X Window System display server bundled with multiple vendor operating systems. An integer overflow vulnerability exists in the 'ProcDbeGetVisualInfo' function in xorg-x11-server versions prior to 1.19.5. An attacker can exploit this vulnerability to cause a denial of...
xorg-x11-server denial of service vulnerability (CNVD-2018-03151)
The xorg-x11-server is an X Window System display server bundled with multiple vendor operating systems. A security vulnerability exists in the XFIXES extension in versions of xorg-x11-server prior to 1.19.5, which stems from a lack of length detection in the program. An attacker can exploit this...
xorg-x11-server denial of service vulnerability (CNVD-2018-03105)
The xorg-x11-server is an X Window System display server bundled with multiple vendor operating systems. A security vulnerability exists in the RENDER extension in xorg-x11-server versions prior to 1.19.5, which stems from a lack of length detection in the program. An attacker can exploit this...
ALPINE-CVE-2017-12179
xorg-x11-server before 1.19.5 was vulnerable to integer overflow in SProcXIBarrierReleasePointer functions allowing malicious X client to cause X server to crash or possibly execute arbitrary code...
ALPINE-CVE-2017-12176
xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious X client to cause X server to crash or possibly execute arbitrary code...